Manual Chapter : Viewing and Editing the Access Configuration

Applies To:

Show Versions Show Versions

BIG-IQ Centralized Management

  • 5.1.0
Manual Chapter

Finding a device-specific resource

In BIG-IQ® Access, you can find a device-specific resource on the left, under Shared resources if it has been marked shared, or under the specific device to which it belongs.
  1. To search for a resource among the shared resources, on the left expand the Access group name and click Shared resources.
  2. In the Filter field, type all or part of the name of the object, and press Enter.
    The screen displays each shared object type, with the number of matching resources it has found, marked in parentheses. For example, Access Profiles list (1), CAPTCHA Configuration List (0), and so on.
  3. To search among device-specific resources, on the left expand the Access group name, click the name of a device, then use the Filter field to sort the resources.
  4. If you do not know the name of the resource you want to find, to find it you must browse through the shared resource types and device-specific resource types for non-source devices.

Device-specific resources: User interface

Device-specific resources with a device selected and with     RADIUS selected in the resource types list

Device-specific resources for a device in an Access group

Shared resources: User interface

Shared resources with the Access Policies resources expanded and Access Profiles List selected

Shared resources in an Access group

Editing a device-specific resource

In BIG-IQ® Access, you can update the properties of a device-specific resource in the working configuration.
  1. At the top left of the screen, select Access from the BIG-IQ menu.
  2. On the left, expand an Access group and click the name of the device.
    The screen displays a list of resource types.
  3. Expand the resource types and select the particular type of resource that you want to change.
    A the screen displays a list of resources displays.
  4. Click the name of the resource that you want to edit.
    The properties screen for that resource opens.
  5. Edit the resource properties.
    Note: Click the question mark (?) icon for help on each property.
  6. Click Save.
The change is distributed to the BIG-IP® device when you deploy the configuration.

Sharing a device-specific resource

In BIG-IQ® Access, you can make a device-specific resource act like a shared resource.
Note: When you make a device-specific resource shared, the resource takes the properties defined for it on the source device
  1. At the top left of the screen, select Access from the BIG-IQ menu.
  2. On the left, expand the name of the Access group that interests you.
  3. Under Device-specific resources, click any device name.
    The screen displays a list of resource types.
  4. Select the type of resource that you want to change.
    The screen displays a list of resources of that type on the right.
  5. From the list, select the check box for the resource that you want to make shared.
  6. Click Mark Shared.
    The resource no longer displays on the list of device-specific resources.
You can now find the resource on the Shared resources list.

Returning a shared resource to device-specific resources

If you made a device-specific resource into a shared resource, you can return it to device-specific resources and configure its properties for each device in the Access group.
Note: Device-specific resources are a system-defined subset of shared resources. Not all shared resources can be made device-specific.
  1. At the top left of the screen, select Access from the BIG-IQ menu.
  2. On the left, expand the name of the Access group that interests you.
  3. Click Shared resources.
    The screen displays a list of resources, with ACCESS POLICIES selected.
  4. Select the type of resource that you want to change.
    The screen displays a list of resources of that type on the right.
  5. From the list, select the resource that you want to return to its device-specific state.
  6. Click Make Device Specific.
    The resource no longer displays on the list of shared resources.
The resource is now located with the device in Device-specific resources. The resource properties now match those from the source device.
You can now change the resource properties to meet the device-specific requirements that you have.

Viewing an access policy

After you've imported a source device, you can view the access policies that are configured on it.
Note: These are the access policies that will be deployed to all the devices in the Access group. You can view the flow of actions in the policy, but not the properties of the actions.
  1. Log in to F5® BIG-IQ® Centralized Management with your user name and password.
  2. At the top left of the screen, select Access from the BIG-IQ menu.
  3. On the left, expand the name of the Access group that interests you.
  4. In the screen on the right, click the name of an access policy.
    A new screen displays the policy's properties.
  5. To view different sections of an access policy, you can scroll left, right, up, and down.
  6. To move to another section of a large access policy more quickly than scrolling allows, somewhere in the policy hold the right mouse button down and drag the mouse to move around the policy .
  7. To close the screen, click Cancel.

About the access policy display

When you view an access policy in BIG-IQ® Access, the items in the policy are of a constant size. If an access policy item name is unusually long and does not include spaces, the name of the policy item will be truncated.